Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/4-Ip7QAeO5DbzLi7xCx8NrQCGNk.roa
File: 4-Ip7QAeO5DbzLi7xCx8NrQCGNk.roa (raw, json)
Hash identifier: SmvAG1LBI9XlkOkAEtoZgMUo0nZeY5y37fjl8LXUBnE=
Subject key identifier: E3:E2:29:ED:00:1E:3B:90:DB:CC:B8:BB:C4:2C:7C:36:B4:02:18:D9
Certificate issuer: /CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Certificate serial: 01A1C62F15F4B3DA8016B98875F4ADB46351
Authority key identifier: 27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/4-Ip7QAeO5DbzLi7xCx8NrQCGNk.roa
Signing time: Tue 10 Nov 2026 15:58:56 +0000
ROA not before: Tue 10 Nov 2026 15:58:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216249
IP address blocks: 2a01:e901::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:2f:15:f4:b3:da:80:16:b9:88:75:f4:ad:b4:63:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Validity
Not Before: Nov 10 15:58:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3e229ed001e3b90dbccb8bbc42c7c36b40218d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:f5:1f:9e:ed:b2:5e:2d:71:29:b3:a9:5c:
ce:0e:df:8b:f0:b4:1b:34:c9:12:cd:14:91:c3:67:
e8:f9:96:ab:9a:37:ff:e5:90:71:6e:fe:2b:1f:1a:
07:cc:a7:36:80:2a:3c:36:a3:b1:e1:51:3e:ce:6c:
5b:16:ff:0d:31:f2:51:76:db:57:f4:f7:ab:7a:93:
bc:64:af:4a:5f:2e:bd:be:2e:3b:f2:b3:f6:09:c0:
17:5d:d9:0e:a8:93:c2:68:44:55:e6:86:99:92:02:
f6:6f:41:8d:b8:5d:2f:b8:8e:7a:1a:67:fe:fd:d8:
96:9c:d1:ce:66:08:79:94:f2:39:35:32:65:c8:ae:
3e:25:be:40:16:d6:10:f5:4f:6d:6a:f0:25:96:3a:
ab:27:fd:87:42:8a:67:7d:14:f0:be:19:aa:b5:07:
a5:e8:e5:67:30:c8:b3:9a:76:5a:1c:9d:31:83:25:
33:96:4a:a6:e4:f1:55:ff:aa:34:61:25:fa:b5:13:
29:a0:c7:4a:06:af:42:0c:da:a4:e9:f2:74:5a:94:
f5:2e:b3:e4:f2:01:4b:6c:05:fe:84:d3:63:f8:7e:
cb:8a:a8:55:a2:1c:79:d4:e9:da:ac:be:66:65:0d:
63:77:34:13:58:9c:05:89:83:66:81:8b:4e:3e:48:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E2:29:ED:00:1E:3B:90:DB:CC:B8:BB:C4:2C:7C:36:B4:02:18:D9
X509v3 Authority Key Identifier:
keyid:27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/4-Ip7QAeO5DbzLi7xCx8NrQCGNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901::/44
Signature Algorithm: sha256WithRSAEncryption
5d:79:67:1c:bd:0d:8c:e9:28:7a:7e:1d:b3:d1:1c:98:5b:95:
0a:8c:70:cd:8d:3c:38:00:5b:b4:f9:db:89:81:6b:b7:3b:0b:
66:1f:82:d0:83:10:c5:ac:b8:b3:4e:f8:aa:d3:22:95:4f:9b:
a7:92:8f:74:69:32:a3:91:8b:a5:b1:cc:fe:ce:a5:5d:0c:08:
45:8c:73:24:1e:51:20:f9:38:e8:d6:f6:98:f8:14:94:75:45:
4b:d3:45:06:75:8d:18:ea:16:11:b5:50:b3:11:70:7f:1d:99:
af:0a:cc:fa:a5:1d:f1:55:db:41:75:ff:95:1a:df:90:7f:b1:
65:d5:05:7b:77:60:e5:11:e7:f0:2c:b5:f3:8f:df:34:e3:4c:
3f:90:9f:f2:2f:25:2e:6d:49:6e:77:48:13:d8:ee:43:52:25:
c9:e6:18:a2:4c:a8:20:96:d2:a5:1c:80:15:7c:4f:56:5a:a1:
53:58:bb:7b:b3:8e:2b:87:41:a4:70:ef:c8:d0:50:3f:a9:5f:
8f:6f:4c:eb:51:de:34:b8:cc:b6:51:6e:e9:ac:1d:81:cc:64:
79:ee:fe:aa:b0:59:a4:f2:1f:1c:ef:04:7d:99:df:3d:d2:de:
12:eb:3c:07:66:94:d2:e9:9e:74:5d:ba:7f:b1:f4:86:ea:d1:
a0:48:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:51 2026 by rpki-client